content-security-policy

Content Security Policy (CSP) implemented unsafely. This includes 'unsafe-inline' or data: inside script-src, overly broad sources such as https: inside object-src or script-src, or not restricting the sources for object-src or script-src.

contribute

Contribute.json isn't required on websites that don't belong to Mozilla

cookies

Cookies set without using the Secure flag or set over HTTP

cross-origin-resource-sharing

Content is not visible via cross-origin resource sharing (CORS) files or headers

public-key-pinning

HTTP Public Key Pinning (HPKP) header not implemented

redirection

Initial redirection is to HTTPS on same host, final destination is HTTPS

referrer-policy

strict-transport-security

HTTP Strict Transport Security (HSTS) header set to less than six months (15768000)

subresource-integrity

Subresource Integrity (SRI) not implemented, and external scripts are loaded over HTTP or use protocol-relative URLs via src="//..."

x-content-type-options

X-Content-Type-Options header set to "nosniff"

x-frame-options

X-Frame-Options (XFO) implemented via the CSP frame-ancestors directive

x-xss-protection

X-XSS-Protection header set to "1; mode=block"

block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests;

Diagnostics

Metrics

http

_ga_MB7Y4J5G9P

_fbp

_ga_D9ZE5LB4KQ

_shopify_sa_p

_pin_unauth

_gcl_au

_shopify_sa_t

_orig_referrer

_shopify_s

_ga_HXMZT7KSHG

_shopify_y

_landing_page

keep_alive

_gid

_gat

_cmp_a

localization

secure_customer_sig

Coque en Bois

WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.

WordPress

Websites that have a shopping cart or checkout page, either using a known ecommerce platform or a custom solution.

Cart Functionality

Shopify is a subscription-based software that allows anyone to set up an online store and sell their products. Shopify store owners can also sell in physical locations using Shopify POS, a point-of-sale app and accompanying hardware.

Shopify

MySQL is an open-source relational database management system.

MySQL

PHP is a general-purpose scripting language used for web development.

Smile App offers a loyalty program for Shopify stores.

Smile App

Privy App helps you improve your website conversion rate, grow your email list, automate your email marketing, drive repeat purchases and much more.

Privy App

GSAP is an animation library that allows you to create animations with JavaScript.

GSAP

Visa

PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.

PayPal

MasterCard facilitates electronic funds transfers throughout the world, most commonly through branded credit cards, debit cards and prepaid cards.

Mastercard

Apple Pay is a mobile payment and digital wallet service by Apple that allows users to make payments in person, in iOS apps, and on the web.

Apple Pay

American Express, also known as Amex, facilitates electronic funds transfers throughout the world, most commonly through branded credit cards, debit cards and prepaid cards.

American Express

Amazon Pay is an online payments processing service that is owned by Amazon. It lets you use the payment methods associated with your Amazon account to make payments for goods and services.

Amazon Pay

Societe des Avis Garantis is a French company that provides customer review and rating services for businesses through its online platform.

Societe des Avis Garantis

Smile is a provider of ecommerce loyalty programs.

Smile

Polyfill is a service which accepts a request for a set of browser features and returns only the polyfills that are needed by the requesting browser.

Polyfill

Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.

Google Tag Manager

Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.

Google Hosted Libraries

Privy is a all-in-one marketing automation platform for ecommerce.

Privy

Pinterest Conversion Tag allows you to track actions people take on your website after viewing your Promoted Pin.

Pinterest Conversion Tag

PhotoSwipe is an open-source gallery to support JavaScript-based image zooming.

PhotoSwipe

LazySizes is a JavaScript library used to delay the loading of images (iframes, scripts, etc) until they come into view.

LazySizes

jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.

jQuery

Hotjar is a suite of analytic tools to assist in the gathering of qualitative data, providing feedback through tools such as heatmaps, session recordings, and surveys.

Hotjar

Google Analytics is a free web analytics service that tracks and reports website traffic.

Google Analytics

Flickity is a JavaScript slider library, built by David DeSandro of Metafizzy fame.

Flickity

Facebook pixel is an analytics tool that allows you to measure the effectiveness of your advertising.

Facebook Pixel

core-js is a modular standard library for JavaScript, with polyfills for cutting-edge ECMAScript features.

core-js

boomerang is a JavaScript library that measures the page load time experienced by real users, commonly called RUM (Real User Measurement).

Boomerang

Priority Hints exposes a mechanism for developers to signal a relative priority for browsers to consider when fetching resources.

Priority Hints

reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.

reCAPTCHA

Pinterest Ads is an online advertising platform developed by Pinterest.

Pinterest Ads

The web-vitals JavaScript is a tiny, modular library for measuring all the web vitals metrics on real users.

web-vitals

Sendinblue is an email marketing solution for small and medium-sized businesses that want to send and automate email marketing campaigns.

Sendinblue

OVHcloud is a global, cloud provider delivering hosted private cloud, public cloud, and dedicated server solutions.

OVHcloud

HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.

HSTS

Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.

Cloudflare

Webpack is an open-source JavaScript module bundler.

Webpack

Open Graph is a protocol that is used to integrate any web page into the social graph.

Open Graph

Module Federation is a webpack technology for dynamically loading parts of other independently deployed builds.

Module Federation

HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.

https://www.coque-en-bois.fr